DEBIAN-CVE-2013-0228

The xeniret function in arch/x86/xen/xen-asm32.S in the Linux kernel before 3.7.9 on 32-bit Xen paravirtops platforms does not properly handle an invalid value in the DS segment register, which allows guest OS users to gain guest OS privileges via a crafted application...

UBUNTU-CVE-2013-0228

The xeniret function in arch/x86/xen/xen-asm32.S in the Linux kernel before 3.7.9 on 32-bit Xen paravirtops platforms does not properly handle an invalid value in the DS segment register, which allows guest OS users to gain guest OS privileges via a crafted application...

Scientific Linux Security Update : 389-ds-base on SL6.x i386/x86_64 (20130221)

A flaw was found in the way 389 Directory Server enforced ACLs after performing an LDAP modify relative distinguished name modrdn operation. After modrdn was used to move part of a tree, the ACLs defined on the moved Distinguished Name were not properly enforced until the server was restarted. Th...

389 security update

CentOS Errata and Security Advisory CESA-2013:0503 Updated 389-ds-base packages that fix one security issue, numerous bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A...

389-ds-base security, bug fix, and enhancement update

1.2.11.15-11 - Resolves: Bug 896256 - updating package touches configuration files 1.2.11.15-10 - Resolves: Bug 889083 - For modifiersName/internalModifiersName feature, internalModifiersname is not working for DNA plugin 1.2.11.15-9 - Resolves: Bug 891930 - DNA plugin no longer reports additiona...

RHEL 6 : 389-ds-base (RHSA-2013:0503)

Updated 389-ds-base packages that fix one security issue, numerous bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base scor...

Linux kernel hits general protection if %ds is corrupt for 32-bit PVOPS.

ISSUE DESCRIPTION Linux kernel when returning from an iret assumes that %ds segment is safe and uses it to reference various per-cpu related fields. Unfortunately the user can modify the LDT and provide a NULL one. Whenever an iret is called we end up in xeniret and try to use the %ds segment and...

Fedora Update for 389-ds-base FEDORA-2012-20156

Check for the Version of 389-ds-base OpenVAS Vulnerability Test Fedora Update for 389-ds-base FEDORA-2012-20156 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

Fedora Update for 389-ds-base FEDORA-2012-20156

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 16 : 389-ds-base-1.2.10.24-1.fc16 (2012-20156)

Here is where you give an explanation of your update. Here is where you give an explanation of your update. cleanallruv support - Change on SLAPIMODRDNNEWSUPERIOR is not evaluated in ACL ACL rules bypass possible Note that Tenable Network Security has extracted the preceding description block...

Scientific Linux Security Update : 389-ds-base on SL6.x i386/x86_64 (20120620)

The 389 Directory Server is an LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP server and command-line utilities for server administration. A flaw was found in the way the 389 Directory Server daemon ns-slapd handled access control instructions AC...

Scientific Linux Security Update : 389-ds-base on SL6.x i386/x86_64 (20120620)

The 389 Directory Server is an LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP server and command-line utilities for server administration. A flaw was found in the way 389 Directory Server handled password changes. If an LDAP user has changed thei...

Scientific Linux Security Update : selinux-policy on SL6.x i386/x86_64

This update fixes the following bug : - Prior to this update, the SELinux policy package did not allow the RHEV agent to execute. This update adds the policy for RHEV agents, so that they can be executed as expected. - Previously, several labels were incorrect and rules for creating new 389-ds...

CentOS Update for 389-ds-base CESA-2012:0813 centos6

Check for the Version of 389-ds-base OpenVAS Vulnerability Test CentOS Update for 389-ds-base CESA-2012:0813 centos6 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

CentOS Update for 389-ds-base CESA-2012:0997 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Update for 389-ds-base CESA-2012:0813 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

389 security update

CentOS Errata and Security Advisory CESA-2012:0997 Updated 389-ds-base packages that fix two security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base...

CVE-2012-2171

SQL injection vulnerability in ModuleServlet.do in the Storage Manager Profiler in IBM System Storage DS Storage Manager before 10.83.xx.18 on DS Series devices allows remote authenticated users to execute arbitrary SQL commands via the selectedModuleOnly parameter in a stateviewmodulelog action ...

Sql injection

SQL injection vulnerability in ModuleServlet.do in the Storage Manager Profiler in IBM System Storage DS Storage Manager before 10.83.xx.18 on DS Series devices allows remote authenticated users to execute arbitrary SQL commands via the selectedModuleOnly parameter in a stateviewmodulelog action ...

CVE-2012-2171

CVE-2012-2171 and CVE-2012-2172 affect IBM System Storage DS Storage Manager Profiler on DS Series devices (before 10.83.xx.18). CVE-2012-2171 is an SQL injection in ModuleServlet.do, exploitable by remote authenticated users via the selectedModuleOnly parameter in a state_viewmodulelog action to...